Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ezbMMQZhv7l_8x7_1Ca0mpyESPI.cer
File: ezbMMQZhv7l_8x7_1Ca0mpyESPI.cer (raw, json)
Hash identifier: ta0J/cnxEbgm4HkjUu4SYaLO7AFw1R80RiAwtuC9msA=
Subject key identifier: 7B:36:CC:31:06:61:BF:B9:7F:F3:1E:FF:D4:26:B4:9A:9C:84:48:F2
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CBE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:30:55 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 2401:9fa0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52201 (0xcbe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:30:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7B36CC310661BFB97FF31EFFD426B49A9C8448F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:43:6c:b0:f1:d1:3f:73:f0:95:6e:5f:6e:
65:9a:47:b6:ee:04:58:d6:a4:76:56:ed:ed:a8:51:
49:d9:7b:64:5c:6a:3a:fc:3b:ae:d3:ab:9d:02:b4:
96:a5:6f:f6:33:58:d0:97:ca:09:d2:16:e9:22:2b:
75:d9:1f:45:f8:86:d9:60:a0:ec:d0:4d:8a:f3:e6:
07:96:09:2d:71:d8:27:c9:0f:63:fe:ec:a9:a7:71:
78:cd:eb:b0:16:5c:4f:21:f6:ad:48:85:a5:bf:fd:
8d:79:b3:36:cc:19:2d:25:18:5c:0a:29:37:c9:28:
85:7c:3c:4e:52:d2:53:5d:2f:ed:9f:f8:a8:c7:f2:
b3:60:5f:5d:2a:3c:ce:dd:86:c8:ef:d7:c5:2c:9b:
12:ef:61:66:be:0c:d9:66:8e:e2:36:69:de:e3:c3:
6c:02:0f:a6:e8:7a:3a:bf:10:85:39:fe:13:1a:7a:
82:16:d5:7a:1c:a9:0f:d1:87:28:0c:49:80:ac:62:
a8:43:38:e8:4e:7f:cc:c4:58:fe:8f:32:91:a7:39:
82:af:e1:e5:3a:62:01:e3:2c:d4:18:c5:38:eb:35:
55:2c:2f:99:80:72:d0:6a:2e:03:34:04:cd:a0:dc:
07:93:7a:61:d1:12:b0:5f:ee:af:be:5e:62:22:5a:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:36:CC:31:06:61:BF:B9:7F:F3:1E:FF:D4:26:B4:9A:9C:84:48:F2
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/ezbMMQZhv7l_8x7_1Ca0mpyESPI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:9fa0::/32
Signature Algorithm: sha256WithRSAEncryption
aa:f1:18:ee:e5:78:5e:6a:9a:7c:61:2e:fd:18:e8:5c:67:f2:
02:be:8d:1f:84:8f:72:d0:ca:3c:89:92:51:33:3d:8b:77:e5:
8c:cc:42:ed:5c:ed:76:2a:ff:00:79:a5:d0:ea:5e:75:a6:c0:
bb:e1:a1:7d:51:de:bf:57:9b:5d:d6:aa:5e:d2:c0:ad:66:23:
b1:46:a0:0e:85:0e:57:42:52:22:d6:61:f8:ce:2c:90:8c:e3:
b0:cf:c4:f5:85:cc:f2:be:2a:d5:e4:72:46:d4:9a:d8:05:93:
29:d2:60:c3:e7:74:2b:d1:c1:f3:04:0d:ac:00:83:fb:55:59:
4d:73:25:04:cf:3d:1d:9a:28:6f:20:fd:34:dd:f4:ba:87:c4:
34:4d:d0:42:f5:80:b6:3e:a2:b6:2c:9b:c7:77:a3:42:00:02:
51:42:38:04:71:f1:8a:fb:c1:b2:8d:25:d5:50:2d:4a:31:1c:
0b:70:26:eb:6a:3b:18:ad:fe:ae:73:8f:c9:37:82:63:00:87:
f9:4d:ff:e0:d4:5b:cf:91:99:bb:ca:6b:e8:39:9e:98:16:87:
09:4f:40:9e:57:06:8d:b3:86:31:8c:a8:d4:b9:88:2c:78:aa:
70:ab:08:81:69:05:43:ab:fc:ad:76:8b:8b:a1:c6:a7:5a:75:
f1:89:ff:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:57:43 2025 by rpki-client